nerdexam
Microsoft

SC-100 · Question #163

You have an operational model based on the Microsoft Cloud Adoption Framework for Azure. You need to recommend a solution that focuses on cloud-centric control areas to protect resources such as…

The correct answer is D. security baselines in the Microsoft Cloud Security Benchmark. The Microsoft Cloud Security Benchmark (MCSB) provides security baselines-prescriptive, cloud-centric configurations-for a wide range of Azure resource types including endpoints (VMs), databases (Azure SQL, Cosmos DB), files (Azure Files), and storage accounts. These baselines…

Design solutions that align with security best practices

Question

You have an operational model based on the Microsoft Cloud Adoption Framework for Azure. You need to recommend a solution that focuses on cloud-centric control areas to protect resources such as endpoints, databases, files, and storage accounts. What should you include in the recommendation?

Options

  • Abusiness resilience
  • Bmodem access control
  • Cnetwork isolation
  • Dsecurity baselines in the Microsoft Cloud Security Benchmark

How the community answered

(24 responses)
  • A
    13% (3)
  • B
    8% (2)
  • C
    4% (1)
  • D
    75% (18)

Explanation

The Microsoft Cloud Security Benchmark (MCSB) provides security baselines-prescriptive, cloud-centric configurations-for a wide range of Azure resource types including endpoints (VMs), databases (Azure SQL, Cosmos DB), files (Azure Files), and storage accounts. These baselines are the direct mapping of the 'security baselines' control area in the Microsoft Cloud Adoption Framework operational model. Defender for Cloud surfaces these baselines and tracks compliance against them. Business resilience (A) focuses on availability and continuity, not security controls for specific resource types. Modern access control (B) addresses identity and access management, not resource-level security configurations. Network isolation (C) is one specific control area covering segmentation, not the broad set of controls covering endpoints, databases, files, and storage.

Topics

#Microsoft Cloud Security Benchmark (MCSB)#Security Baselines#Cloud Adoption Framework (CAF)#Resource Protection

Community Discussion

No community discussion yet for this question.

Full SC-100 Practice